On Tuesday night i ended up with the win32\cryptor virus on my PC where it closed down everything on it, i have since then managed to get the internet back after running MBAM and clearing all noticable viruses, but when running it in Safe Mode i noticed that i am now not the Administrator even thow when run in normal mode it says i am.

Is it possible to fix this? and can i get my files back, as i have some pictures of centermental value i would love to get back. when i run a scan i can still see the files for these but cant get to them.

Last edited by scott88 on Thu Dec 08, 2011 11:46 am, edited 1 time in total.

This probably isn't the best forum to get help with cleaning an infected computer (as my first reaction is to direct you to format the drive), but I'll try to help as much as I can.

I would try to use the instructions found here:http://www.bleepingcomputer.com/combofi ... e-combofixIf you're unable to download the tool on your computer, download it on another computer and copy it over with a USB drive. If that doesn't help, they have (in my opinion) the best forum for troubleshooting this type of issue.

The chances are the virus has marked the folder as hidden. If you boot into safe mode run mbam making it sure its up to date once this has done. You will then need to go to view folder options show hidden files then if you go to my picture you see the folders marked as hidden click prop ties and unhidden